Bug ID 562780: Unable to control AVR HTTP Traffic Capturing buffer size

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP AVR(all modules)

Known Affected Versions:
11.4.1, 11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.1.0

Opened: Dec 14, 2015

Severity: 3-Major

Symptoms

Performing AVR HTTP Traffic capturing captures the first 2K of both the request and the response payload. This is by design. You cannot change the buffer size allocated to each captured message.

Impact

Cannot see the entire payload if it exceeds 2KB

Conditions

Use of AVR HTTP Traffic capturing and having requests/responses larger than 2K bytes.

Workaround

N/A

Fix Information

You can now control the buffer size of HTTP traffic captured of both the request and response payload. To do this, perform the following steps: 1. Edit: /etc/bigstart/scripts/avr.provision 2. Change the following lines: tc_request_buffsize=2048 tc_response_buffsize=2048 to tc_request_buffsize=<new size> tc_response_buffsize=<new size> 3. Restart tmm by running the command: bigstart restart tmm

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips